Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
File:                     ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json)
Hash identifier:          Tq4MEDr+a98YYK4a1UPbMlz8i2X+O0u3hpBmH7KTrAY=
Subject key identifier:   22:99:49:72:E3:4B:F2:88:C9:1B:79:BD:58:1A:30:CE:F7:8C:88:62
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Certificate issuer:       /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial:       03AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
Manifest number:          0345
Signing time:             Sun 01 Mar 2026 02:19:22 +0000
Manifest this update:     Sun 01 Mar 2026 02:19:22 +0000
Manifest next update:     Sun 08 Mar 2026 02:19:22 +0000
Files and hashes:         1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: KPb+W0aCIiQNmCFc0AsgYMTbdrke4mu961L0r6Jbsns=)
                          2: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=)
                          3: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=)
                          4: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=)
                          5: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=)
                          6: 20978DD270E411F08F40242AC4F9AE02.roa (hash: R3SuPMnexdh7gybsYJg7tLaSKVa8pxRhjB4eo3WkAzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938 (0x3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
        Validity
            Not Before: Mar  1 02:19:22 2026 GMT
            Not After : Mar  8 02:19:22 2026 GMT
        Subject: CN=69a3a22a-c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:10:3b:e1:e5:b3:29:ce:38:5c:07:4d:b7:
                    99:87:3c:c1:8f:53:e8:38:7e:e4:99:2e:26:09:b2:
                    f4:0b:d5:a7:44:3f:d6:97:50:37:74:42:78:77:63:
                    7c:56:e7:29:32:e5:e4:39:e0:4c:5c:85:50:9b:60:
                    66:c0:e5:c5:eb:0e:ff:02:7b:42:d7:a8:fa:a0:35:
                    f0:a5:49:8a:fd:b1:38:0d:cf:1e:7f:1f:96:13:ee:
                    0b:aa:90:55:42:68:d7:fd:f5:46:c8:38:63:88:f4:
                    63:1c:0d:b0:9a:e8:32:5e:d2:6c:d6:6d:f4:41:19:
                    88:95:a2:43:2e:82:41:66:c1:31:6b:ab:e3:20:cc:
                    07:53:b5:ee:bf:78:34:5b:2d:2c:3e:8b:c3:0d:29:
                    d8:c0:58:a2:1c:6d:ff:6f:48:05:79:d6:95:49:d2:
                    e5:ed:36:a7:54:2f:a2:56:6d:bb:3f:db:b8:30:d5:
                    ae:c2:d3:d3:0d:4e:aa:c8:d1:a4:a4:7f:93:0e:39:
                    3b:ae:4c:0d:30:5e:de:71:ea:d3:d5:1d:1b:85:5e:
                    ef:5c:36:bf:25:bf:df:ee:0e:e4:3d:da:61:85:24:
                    c0:71:0e:0c:c0:f9:ab:6a:13:32:ff:8d:45:25:c6:
                    8c:25:8e:dc:90:e1:c7:4e:80:73:4d:14:61:f2:48:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:49:72:E3:4B:F2:88:C9:1B:79:BD:58:1A:30:CE:F7:8C:88:62
            X509v3 Authority Key Identifier:
                keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:6e:2c:b6:ea:5c:f3:87:e1:e5:2c:c5:83:0c:31:aa:b4:
         f0:98:71:12:2b:63:42:d3:12:d8:50:d3:40:d7:a4:c6:5d:f0:
         e6:9c:2f:f2:91:9d:07:38:c7:08:40:87:a4:d2:66:f9:cf:43:
         68:70:73:32:e2:56:39:f4:18:34:5e:5a:84:c4:87:17:aa:d6:
         e4:f9:77:c2:dc:5c:dc:c1:fd:69:92:bf:d3:07:47:e8:f0:89:
         e2:ba:ca:4e:cd:4c:2a:97:53:ab:7f:b3:dc:bf:9e:d9:f1:b7:
         38:d6:c6:7a:77:24:32:43:cb:42:c2:51:03:15:85:e0:10:db:
         0b:e8:60:02:ce:45:1c:7c:f4:a2:f2:26:2a:f9:cf:1f:cf:32:
         2a:13:f4:d4:a2:85:88:13:5c:30:2e:fb:da:c3:c4:5f:81:20:
         46:80:90:54:5e:4e:89:1e:79:df:bc:bf:8c:b8:5e:be:03:40:
         ef:1d:fa:67:a2:eb:af:9f:65:da:9d:79:d0:2e:13:fa:e3:56:
         2f:31:2f:aa:04:88:f8:3f:7e:a9:56:6c:42:94:0d:a8:c9:20:
         61:6e:6b:63:35:c2:6d:f8:7e:d7:60:6b:38:3e:7f:00:1c:f6:
         65:53:2d:d9:9c:f9:a0:a4:21:b1:60:27:e0:c3:fe:a2:4d:30:
         cb:11:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:28 2026 by rpki-client